Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: TNt/1pydasH4BB8xKXUjGMMyCJZBTJ/4x3aY4JBLEmU=
Subject key identifier: 7B:F1:86:E0:06:EC:2C:FB:7E:D0:07:41:FF:F5:FC:25:BF:51:6A:5A
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019769CEA1924D97A0BC7D7FF16A12B290C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 02E5
Signing time: Fri 13 Jun 2025 15:00:38 +0000
Manifest this update: Fri 13 Jun 2025 15:00:38 +0000
Manifest next update: Sat 14 Jun 2025 15:00:38 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: CxOFpLaDUvBqqIZe4mVudySG4cJKppVTDAP2rZKG3vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:a1:92:4d:97:a0:bc:7d:7f:f1:6a:12:b2:90:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Jun 13 15:00:38 2025 GMT
Not After : Jun 14 15:00:38 2025 GMT
Subject: CN=7bf186e006ec2cfb7ed00741fff5fc25bf516a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:3d:a7:64:8c:70:b0:54:27:7e:0d:fc:7c:
37:ac:cc:aa:50:41:70:dc:3a:37:14:3b:e6:52:6a:
d9:07:d2:df:f6:9c:ff:fa:42:67:a1:24:3e:a2:fd:
3f:fc:9e:7a:a4:28:ba:b6:10:3e:3b:2d:27:f9:b0:
b4:bc:79:49:30:52:1e:26:13:94:7f:1a:17:43:27:
0c:8d:4c:fa:19:ec:f7:e7:62:b9:e3:fb:7d:e4:64:
a3:13:04:14:e2:23:f6:ff:74:bd:90:a9:e2:72:ed:
af:68:a4:a2:8d:2a:0f:41:eb:66:6e:95:1b:04:60:
b2:21:c1:ed:c9:bb:c9:f1:3a:67:97:eb:ce:1d:12:
d7:2a:22:f6:69:ac:4b:3a:3f:42:e8:12:b4:41:ae:
6f:6c:fb:ad:b4:f6:e0:47:b7:ab:bf:d8:ff:db:01:
af:ef:cc:15:bf:af:ce:c7:c6:a1:a3:7a:1c:17:48:
f1:d3:56:c3:c9:8a:07:ad:61:9b:a0:d8:9d:ad:e8:
35:c2:76:38:af:ad:e7:27:ac:43:a6:de:c5:7d:76:
ef:71:18:1c:da:a0:d4:d0:2c:44:38:15:a8:62:ef:
80:e0:ea:7a:45:38:61:dd:6a:da:8d:41:7a:1c:9a:
64:6b:6b:0b:5c:7a:a4:9b:6c:4d:fd:b4:e6:0e:d9:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:86:E0:06:EC:2C:FB:7E:D0:07:41:FF:F5:FC:25:BF:51:6A:5A
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:78:fd:76:49:21:73:a8:c8:c2:c0:4f:4e:32:d2:ca:92:11:
d2:e5:cd:33:c8:ca:2a:a7:e3:89:46:c3:4c:bb:23:d5:59:59:
82:aa:51:ff:74:62:f9:e7:85:bd:22:58:30:c8:29:25:0c:b3:
4c:80:57:ea:b1:d0:5a:81:08:68:95:6c:23:43:11:bc:18:c7:
67:9b:28:ac:86:32:8c:c5:a7:5e:68:f8:84:3d:cc:52:0d:89:
91:75:a7:1f:31:df:42:6d:16:e0:a5:57:83:70:80:25:03:f6:
c3:63:10:d8:2d:54:0c:23:7c:3a:dc:20:b6:61:b0:02:3d:d3:
50:56:e0:5e:4d:17:31:17:a9:6d:a0:5c:ca:4f:0a:04:23:02:
f4:6f:0b:6f:4d:f2:9a:2e:53:d0:bc:90:59:80:4c:f9:96:01:
0a:6c:59:b4:a8:e2:03:5e:12:ee:77:a6:4d:ec:27:24:b9:04:
51:47:f5:bc:25:91:cb:e7:0e:a5:f1:43:01:4e:57:ae:62:f6:
36:e8:93:e9:f3:26:5a:10:16:ff:4a:13:83:c7:b4:ac:fd:77:
23:84:3a:51:f8:4a:24:5a:4a:30:db:11:2f:e9:49:72:7f:ae:
65:7f:0c:f0:7b:ca:56:25:17:32:b1:a9:52:40:b1:6f:fe:45:
5a:62:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:58 2025 by rpki-client